In a staggering privacy breach, over 21 million images documenting employee activity from a workplace surveillance tool have been leaked. The affected app is called WorkComposer, which is used by IT teams […] Thank you for being a Ghacks reader.…
Erlang/OTP SSH: Namhafte Hersteller von kritischer Lücke betroffen
Erlang/OTP SSH wird von vielen namhaften Herstellern mitgeliefert. Daher betrifft eine kritische Lücke auch Cisco und Ericsson. Dieser Artikel wurde indexiert von heise security News Lesen Sie den originalen Artikel: Erlang/OTP SSH: Namhafte Hersteller von kritischer Lücke betroffen
(g+) Registermodernisierung: Torwächter für vertrauliche Daten
In der Zukunft eines digitalen Staats sollen Daten sicher vor unbefugtem Zugriff sein. Dafür gibt es ein mächtiges Werkzeug, das aber noch Schwächen hat. (verwaltungimwandel, Datenschutz) Dieser Artikel wurde indexiert von Golem.de – Security Lesen Sie den originalen Artikel: (g+)…
Zyxel RCE Flaw Lets Attackers Run Commands Without Authentication
Security researcher Alessandro Sgreccia (aka “rainpwn”) has revealed a set of critical vulnerabilities in Zyxel’s USG FLEX-H firewall series that enable remote code execution (RCE) and privilege escalation—without authentication. The findings, affecting models including the FLEX 100H and FLEX 700H,…
SecLytics Rebrands as Augur Security, Raises $7M in Seed Funding
AI-powered threat prevention company Augur (rebranded from SecLytics) has raised $7 million in seed funding. The post SecLytics Rebrands as Augur Security, Raises $7M in Seed Funding appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read the…
DirectDefense launches Security Essentials to protect growing SMBs
DirectDefense has launched DirectDefense Security Essentials, a fully managed, subscription-based security program purpose-built for small to mid-sized businesses (SMBs). With Security Essentials, DirectDefense is addressing the critical security needs of the underserved SMB market by combining virtual CISO (vCISO) services,…
Meta AI Access On Ray-Ban Glasses Expands In Europe
Meta has expanded access to its AI assistant in more European countries, for users of its Ray-Ban smart glasses This article has been indexed from Silicon UK Read the original article: Meta AI Access On Ray-Ban Glasses Expands In Europe
Securing Fintech Operations Through Smarter Controls and Automation
With the rise of fintechs, accuracy alone isn’t enough, security and reliability are just as necessary. For fintech… This article has been indexed from Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto Read the original article: Securing Fintech…
Skyhawk Security brings preemptive cloud app defense to RSAC 2025
Skyhawk Security is adding new protection for custom-built cloud applications. The company announced the update to its AI-powered Autonomous Purple Team for RSAC 2025 Conference, which starts April 28 in San Francisco. The AI-based purple team identifies security weaknesses and…
Critical Commvault Command Center Flaw Enables Attackers to Execute Code Remotely
A critical security flaw has been disclosed in the Commvault Command Center that could allow arbitrary code execution on affected installations. The vulnerability, tracked as CVE-2025-34028, carries a CVSS score of 9.0 out of a maximum of 10.0. “A critical…
Automating Zero Trust in Healthcare: From Risk Scoring to Dynamic Policy Enforcement Without Network Redesign
The Evolving Healthcare Cybersecurity Landscape Healthcare organizations face unprecedented cybersecurity challenges in 2025. With operational technology (OT) environments increasingly targeted and the convergence of IT and medical systems creating an expanded attack surface, traditional security approaches are proving inadequate. According…
Verizon DBIR: Small Businesses Bearing the Brunt of Ransomware Attacks
While the Verizon annual report showed that ransomware is rising, it also found that ransom payments are in decline This article has been indexed from www.infosecurity-magazine.com Read the original article: Verizon DBIR: Small Businesses Bearing the Brunt of Ransomware Attacks
IT Security News Hourly Summary 2025-04-24 12h : 20 posts
20 posts were published in the last hour 9:34 : Sicherheitslücken: Schwachstellenscanner Nessus ist angreifbar 9:34 : Github: Forscher macht aus gelöschten Dateien 64.000 US-Dollar 9:33 : [NEU] [mittel] IBM InfoSphere Information Server: Mehrere Schwachstellen 9:32 : Your vendor may…
Wegen Taurus: Prorussische Hacker attackieren Deutschland
Die Pläne von Friedrich Merz, der Ukraine Taurus-Marschflugkörper zu liefern, verärgern prorussische Cyberakteure. Sie schlagen mit Datenpaketen um sich. (Cyberwar, DoS) Dieser Artikel wurde indexiert von Golem.de – Security Lesen Sie den originalen Artikel: Wegen Taurus: Prorussische Hacker attackieren Deutschland
[NEU] [mittel] Drupal Extensions: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in verschiedenen Drupal Extensions ausnutzen, um einen Cross-Site Scripting- oder CSRF-Angriff durchzuführen oder weitere nicht spezifizierte Angriffe durchzuführen. Dieser Artikel wurde indexiert von BSI Warn- und Informationsdienst (WID): Schwachstellen-Informationen (Security Advisories) Lesen Sie den originalen…
Deployments to Dollars: Turning Services into Recurring Revenue
This post doesn’t have text content, please click on the link below to view the original article. This article has been indexed from Blog Read the original article: Deployments to Dollars: Turning Services into Recurring Revenue
Elusive Comet Attack: Hackers Use Zoom Remote-Control to Steal Crypto
Hackers in the Elusive Comet campaign exploit Zoom’s remote-control feature to steal cryptocurrency, and over $100K lost in… This article has been indexed from Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto Read the original article: Elusive Comet…
WhatsApp introduces Advanced Chat Privacy to protect sensitive communications
WhatsApp adds Advanced Chat Privacy feature that allows users to block others from sharing chat content outside the app. WhatsApp announced the availability of a new feature called “Advanced Chat Privacy” for both individual and group chats that enhances content…
GitLab Security Update – Patch for XSS, DoS & Account Takeover Vulnerabilities
GitLab has released critical security patches addressing multiple high-severity vulnerabilities in its platform, highlighting robust security measures amid increasing cyber threats. The company has issued patch versions 17.11.1, 17.10.5, and 17.9.7 for both Community Edition (CE) and Enterprise Edition (EE).…
AI-Powered Polymorphic Phishing Is Changing the Threat Landscape
Combined with AI, polymorphic phishing emails have become highly sophisticated, creating more personalized and evasive messages that result in higher attack success rates. The post AI-Powered Polymorphic Phishing Is Changing the Threat Landscape appeared first on SecurityWeek. This article has…
Sonicwall warnt vor DoS-Lücke in SSLVPN
Eine Sicherheitslücke betrifft das SSLVPN von Sonicwalls SonicOS. Sie ist als hohes Risiko klassifiziert. Dieser Artikel wurde indexiert von heise security News Lesen Sie den originalen Artikel: Sonicwall warnt vor DoS-Lücke in SSLVPN
[NEU] [hoch] GitLab: Mehrere Schwachstellen
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Cross-Site-Scripting durchzuführen, einen Denial of Service auszulösen oder Benutzerrechte zu erlangen Dieser Artikel wurde indexiert von BSI Warn- und Informationsdienst (WID): Schwachstellen-Informationen (Security Advisories) Lesen Sie…
CISA Suspends Use of VirusTotal and Censys, Signaling Potential Setbacks for Cyber Defense Efforts
The Cybersecurity and Infrastructure Security Agency (CISA), a key agency responsible for protecting the United States’ critical infrastructure, has taken a significant step by instructing its threat hunting team to cease using VirusTotal—a widely used cybersecurity tool—by April 20, 2025.…
Fortra’s Offensive & Defensive Approach to Channel Security
Fortra redefines cybersecurity with a unified platform, aiming to simplify tool fatigue and empower channel partners for growth in 2025. The post Fortra’s Offensive & Defensive Approach to Channel Security appeared first on eSecurity Planet. This article has been indexed…